Executive Summary

CVE-2025-67813 is a security vulnerability in Quest KACE Desktop Authority versions up to 11.3.1 where the Named Pipes used for inter-process communication have insecure permissions. This means that these Named Pipes were created without proper access control restrictions, allowing unauthorized local users to access them. This flaw could allow unintended interactions or privilege escalation within the application. [2]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing unauthorized local users to access the Named Pipes used by the application, potentially leading to privilege escalation or unintended interactions within the application context. This could compromise the security and integrity of the system where Quest KACE Desktop Authority is installed. [2]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking the permissions on the Named Pipes used by Quest KACE Desktop Authority up to version 11.3.1. Since the issue involves insecure permissions allowing unauthorized local access, you can inspect the Named Pipes permissions on the affected system. Specific commands are not provided in the resources, but generally, on Windows systems, you can use PowerShell or Sysinternals tools like 'AccessChk' to review Named Pipe permissions. [2]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate step to mitigate this vulnerability is to upgrade Quest KACE Desktop Authority to version 11.3.2 or later, as this version contains the patch that fixes the insecure Named Pipe permissions issue. [2]

Useful 0 Not Useful 0